# 授权项 #### Token管理 | 权限 | 对应API接口 | 授权项（Action） | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 获取委托Token | [POST /v3/auth/tokens](https://support.huaweicloud.com/api-iam/iam_30_0003.html) | iam:tokens:assume | - | - | #### 访问密钥管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 获取委托的临时访问密钥和securitytoken | [POST /v3.0/OS-CREDENTIAL/securitytokens](https://support.huaweicloud.com/api-iam/iam_04_0101.html) | iam:tokens:assume | - | - | | 查询所有永久访问密钥 | [GET /v3.0/OS-CREDENTIAL/credentials](https://support.huaweicloud.com/api-iam/iam_03_0003.html) | iam:credentials:listCredentials | - | - | | 查询指定永久访问密钥 | [GET /v3.0/OS-CREDENTIAL/credentials/{access_key}](https://support.huaweicloud.com/api-iam/iam_03_0002.html) | iam:credentials:getCredential | - | - | | 创建永久访问密钥 | [POST /v3.0/OS-CREDENTIAL/credentials](https://support.huaweicloud.com/api-iam/iam_03_0001.html) | iam:credentials:createCredential | - | - | | 修改指定永久访问密钥 | [PUT /v3.0/OS-CREDENTIAL/credentials/{access_key}](https://support.huaweicloud.com/api-iam/iam_03_0004.html) | iam:credentials:updateCredential | - | - | | 删除指定永久访问密钥 | [DELETE /v3.0/OS-CREDENTIAL/credentials/{access_key}](https://support.huaweicloud.com/api-iam/iam_03_0005.html) | iam:credentials:deleteCredential | - | - | #### 虚拟MFA管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 绑定MFA设备 | [PUT /v3.0/OS-MFA/mfa-devices/bind](https://support.huaweicloud.com/api-iam/iam_08_0017.html) | iam:mfa:bindMFADevice | - | - | | 解绑MFA设备 | [PUT /v3.0/OS-MFA/mfa-devices/unbind](https://support.huaweicloud.com/api-iam/iam_08_0018.html) | iam:mfa:unbindMFADevice | - | - | | 创建虚拟MFA设备密钥 | [POST /v3.0/OS-MFA/virtual-mfa-devices](https://support.huaweicloud.com/api-iam/iam_08_0019.html) | iam:mfa:createVirtualMFADevice | - | - | | 删除MFA设备 | [DELETE /v3.0/OS-MFA/virtual-mfa-devices](https://support.huaweicloud.com/api-iam/iam_08_0020.html) | iam:mfa:deleteVirtualMFADevice | - | - | #### 项目管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询项目列表 | [GET /v3/projects](https://support.huaweicloud.com/api-iam/iam_06_0001.html) | iam:projects:listProjects | - | - | | 创建项目 | [POST /v3/projects](https://support.huaweicloud.com/api-iam/iam_06_0004.html) | iam:projects:createProject | - | - | | 修改项目信息 | [PATCH /v3/projects/{project_id}](https://support.huaweicloud.com/api-iam/iam_06_0005.html) | iam:projects:updateProject | - | - | | 设置项目状态 | [PUT /v3-ext/projects/{project_id}](https://support.huaweicloud.com/api-iam/iam_06_0007.html) | iam:projects:updateProject | - | - | | 查询指定IAM用户的项目列表 | [GET /v3/users/{user_id}/projects](https://support.huaweicloud.com/api-iam/iam_06_0002.html) | iam:projects:listProjectsForUser | - | - | | 删除指定项目 | × | iam:projects:deleteProject | - | - | | 查询指定项目的配额 | [GET /v3.0/OS-QUOTA/projects/{project_id}](https://support.huaweicloud.com/api-iam/iam_06_0009.html) | iam:quotas:listQuotasForProject | - | - | #### 账号管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询账号配额 | [GET /v3.0/OS-QUOTA/domains/{domain_id}](https://support.huaweicloud.com/api-iam/iam_02_0114.html) | iam:quotas:listQuotas | - | - | #### IAM用户管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 管理员查询IAM用户列表 | [GET /v3/users](https://support.huaweicloud.com/api-iam/iam_08_0001.html) | iam:users:listUsers | - | - | | 管理员创建IAM用户 | [POST /v3/users](https://support.huaweicloud.com/api-iam/iam_08_0006.html) | iam:users:createUser | - | - | | 管理员修改IAM用户信息 | [PATCH /v3/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_08_0008.html) | iam:users:updateUser | - | - | | 管理员修改IAM用户信息（推荐） | [PUT /v3.0/OS-USER/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_08_0011.html) | iam:users:updateUser | - | - | | 管理员删除IAM用户 | [DELETE /v3/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_08_0009.html) | iam:users:deleteUser | - | - | | 管理员创建IAM用户（推荐） | [POST /v3.0/OS-USER/users](https://support.huaweicloud.com/api-iam/iam_08_0015.html) | iam:users:createUser | - | - | | 查询用户详情(包含邮箱和手机号码) | [GET /v3.0/OS-USER/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_08_0003.html) | iam:users:getUser | - | - | | 查询IAM用户详情 | [GET /v3/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_08_0002.html) | iam:users:getUser | - | - | | 管理员重置IAM用户密码 | × | iam:users:resetUserPassword | - | - | | 设置登录保护 | × | iam:users:setUserLoginProtect | - | - | | 查询指定项目上有权限的用户列表 | × | iam:users:listUsersForProject | - | - | | 查询IAM用户的MFA绑定信息列表 | [GET /v3.0/OS-MFA/virtual-mfa-devices](https://support.huaweicloud.com/api-iam/iam_08_0012.html) | iam:mfa:listVirtualMFADevices | - | - | | 查询指定IAM用户的MFA绑定信息 | [GET /v3.0/OS-MFA/users/{user_id}/virtual-mfa-device](https://support.huaweicloud.com/api-iam/iam_08_0013.html) | iam:mfa:getVirtualMFADevice | - | - | | 查询IAM用户的登录保护状态信息列表 | [GET /v3.0/OS-USER/login-protects](https://support.huaweicloud.com/api-iam/iam_08_0014.html) | iam:users:listUserLoginProtects | - | - | | 查询指定IAM用户的登录保护状态信息 | [GET /v3.0/OS-USER/users/{user_id}/login-protect](https://support.huaweicloud.com/api-iam/iam_08_0016.html) | iam:users:getUserLoginProtect | - | - | #### 用户组管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询IAM用户所属用户组 | [GET /v3/users/{user_id}/groups](https://support.huaweicloud.com/api-iam/iam_08_0004.html) | iam:groups:listGroupsForUser | - | - | | 管理员查询用户组所包含的IAM用户 | [GET /v3/groups/{group_id}/users](https://support.huaweicloud.com/api-iam/iam_08_0005.html) | iam:users:listUsersForGroup | - | - | | 查询用户组列表 | [GET /v3/groups](https://support.huaweicloud.com/api-iam/iam_09_0001.html) | iam:groups:listGroups | - | - | | 查询用户组详情 | [GET /v3/groups/{group_id}](https://support.huaweicloud.com/api-iam/iam_09_0002.html) | iam:groups:getGroup | - | - | | 创建用户组 | [POST /v3/groups](https://support.huaweicloud.com/api-iam/iam_09_0003.html) | iam:groups:createGroup | - | - | | 更新用户组 | [PATCH /v3/groups/{group_id}](https://support.huaweicloud.com/api-iam/iam_09_0004.html) | iam:groups:updateGroup | - | - | | 删除用户组 | [DELETE /v3/groups/{group_id}](https://support.huaweicloud.com/api-iam/iam_09_0005.html) | iam:groups:deleteGroup iam:permissions:removeUserFromGroup iam:permissions:revokeRoleFromGroup iam:permissions:revokeRoleFromGroupOnProject iam:permissions:revokeRoleFromGroupOnDomain | - | - | | 查询用户是否在用户组中 | [HEAD /v3/groups/{group_id}/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_09_0006.html) | iam:permissions:checkUserInGroup | - | - | | 添加IAM用户到用户组 | [PUT /v3/groups/{group_id}/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_09_0007.html) | iam:permissions:addUserToGroup | - | - | | 移除用户组中的IAM用户 | [DELETE /v3/groups/{group_id}/users/{user_id}](https://support.huaweicloud.com/api-iam/iam_09_0008.html) | iam:permissions:removeUserFromGroup | - | - | #### 权限管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询权限列表 | [GET /v3/roles](https://support.huaweicloud.com/api-iam/iam_10_0001.html) | iam:roles:listRoles | - | - | | 查询权限详情 | [GET /v3/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0002.html) | iam:roles:getRole | - | - | | 查询租户授权信息 | [GET /v3.0/OS-PERMISSION/role-assignments](https://support.huaweicloud.com/api-iam/iam_10_0014.html) | iam:permissions:listRoleAssignments | √ | √ | | 查询全局服务中的用户组权限 | [GET /v3/domains/{domain_id}/groups/{group_id}/roles](https://support.huaweicloud.com/api-iam/iam_10_0003.html) | iam:permissions:listRolesForGroupOnDomain | - | - | | 查询项目服务中的用户组权限 | [GET /v3/projects/{project_id}/groups/{group_id}/roles](https://support.huaweicloud.com/api-iam/iam_10_0004.html) | iam:permissions:listRolesForGroupOnProject | - | - | | 为用户组授予全局服务权限 | [PUT /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0005.html) | iam:permissions:grantRoleToGroupOnDomain | - | - | | 为用户组授予项目服务权限 | [PUT /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0006.html) | iam:permissions:grantRoleToGroupOnProject | - | - | | 移除用户组的项目服务权限 | [DELETE /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0010.html) | iam:permissions:revokeRoleFromGroupOnProject | - | - | | 移除用户组的全局服务权限 | [DELETE /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0009.html) | iam:permissions:revokeRoleFromGroupOnDomain | - | - | | 查询用户组是否拥有全局服务权限 | [HEAD /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0007.html) | iam:permissions:checkRoleForGroupOnDomain | - | - | | 查询用户组是否拥有项目服务权限 | [HEAD /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_10_0008.html) | iam:permissions:checkRoleForGroupOnProject | - | - | | 为用户组授予所有项目服务权限 | [PUT /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_projects](https://support.huaweicloud.com/api-iam/iam_02_0519.html) | iam:permissions:grantRoleToGroup | - | - | | 查询用户在指定项目上拥有的权限 | × | iam:permissions:listRolesForUserOnProject | - | - | | 查询用户组的所有权限 | × | iam:permissions:listRolesForGroup | - | - | | 查询用户组是否拥有指定权限 | × | iam:permissions:checkRoleForGroup | - | - | | 移除用户组的指定权限 | × | iam:permissions:revokeRoleFromGroup | - | - | | 查询账号授权记录 | × | iam:permissions:listRoleAssignments | - | - | #### 自定义策略管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询自定义策略列表 | [GET /v3.0/OS-ROLE/roles](https://support.huaweicloud.com/api-iam/iam_02_0011.html) | iam:roles:listRoles | - | - | | 查询自定义策略详情 | [GET /v3.0/OS-ROLE/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_02_0012.html) | iam:roles:getRole | - | - | | 创建云服务自定义策略 | [POST /v3.0/OS-ROLE/roles](https://support.huaweicloud.com/api-iam/iam_02_0013.html) | iam:roles:createRole | - | - | | 修改云服务自定义策略 | [PATCH /v3.0/OS-ROLE/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_02_0014.html) | iam:roles:updateRole | - | - | | 删除自定义策略 | [DELETE /v3.0/OS-ROLE/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_02_0015.html) | iam:roles:deleteRole | - | - | #### 委托管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 创建委托 | [POST /v3.0/OS-AGENCY/agencies](https://support.huaweicloud.com/api-iam/iam_12_0003.html) | iam:agencies:createAgency | - | - | | 查询指定条件下的委托列表 | [GET /v3.0/OS-AGENCY/agencies](https://support.huaweicloud.com/api-iam/iam_12_0001.html) | iam:agencies:listAgencies | - | - | | 查询委托详情 | [GET /v3.0/OS-AGENCY/agencies/{agency_id}](https://support.huaweicloud.com/api-iam/iam_12_0002.html) | iam:agencies:getAgency | - | - | | 修改委托 | [PUT /v3.0/OS-AGENCY/agencies/{agency_id}](https://support.huaweicloud.com/api-iam/iam_12_0004.html) | iam:agencies:updateAgency | - | - | | 删除委托 | [DELETE /v3.0/OS-AGENCY/agencies/{agency_id}](https://support.huaweicloud.com/api-iam/iam_12_0005.html) | iam:agencies:deleteAgency | - | - | | 为委托授予项目服务权限 | [PUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_12_0009.html) | iam:permissions:grantRoleToAgencyOnProject | - | - | | 查询委托是否拥有项目服务权限 | [HEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_12_0011.html) | iam:permissions:checkRoleForAgencyOnProject | - | - | | 查询项目服务中的委托权限 | [GET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles](https://support.huaweicloud.com/api-iam/iam_12_0007.html) | iam:permissions:listRolesForAgencyOnProject | - | - | | 移除委托的项目服务权限 | [DELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_12_0013.html) | iam:permissions:revokeRoleFromAgencyOnProject | - | - | | 为委托授予全局服务权限 | [PUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_12_0008.html) | iam:permissions:grantRoleToAgencyOnDomain | - | - | | 查询委托是否拥有全局服务权限 | [HEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_12_0010.html) | iam:permissions:checkRoleForAgencyOnDomain | - | - | | 查询全局服务中的委托权限 | [GET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles](https://support.huaweicloud.com/api-iam/iam_12_0006.html) | iam:permissions:listRolesForAgencyOnDomain | - | - | | 移除委托的全局服务权限 | [DELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_12_0012.html) | iam:permissions:revokeRoleFromAgencyOnDomain | - | - | | 查询委托的所有权限 | [GET /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/inherited_to_projects](https://support.huaweicloud.com/api-iam/iam_12_0014.html) | iam:permissions:listRolesForAgency | - | - | | 查询委托是否拥有指定权限 | [HEAD /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects](https://support.huaweicloud.com/api-iam/iam_12_0016.html) | iam:permissions:checkRoleForAgency | - | - | | 为委托授予指定权限 | [PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects](https://support.huaweicloud.com/api-iam/iam_12_0015.html) | iam:permissions:grantRoleToAgency | - | - | | 移除委托的指定权限 | [DELETE /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects](https://support.huaweicloud.com/api-iam/iam_12_0017.html) | iam:permissions:revokeRoleFromAgency | - | - | #### 企业项目管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询企业项目关联的用户组 | [GET /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/groups](https://support.huaweicloud.com/api-iam/iam_02_0518.html) | iam:permissions:listGroupsOnEnterpriseProject | - | √ | | 查询企业项目已关联用户组的权限 | [GET /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/groups/{group_id}/roles](https://support.huaweicloud.com/api-iam/iam_02_0524.html) | iam:permissions:listRolesForGroupOnEnterpriseProject | - | √ | | 基于用户组为企业项目授权 | [PUT /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_02_0520.html) | iam:permissions:grantRoleToGroupOnEnterpriseProject | - | √ | | 删除企业项目关联的用户组权限 | [DELETE /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/groups/{group_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/iam_02_0521.html) | iam:permissions:revokeRoleFromGroupOnEnterpriseProject | - | √ | | 查询用户组关联的企业项目 | [GET /v3.0/OS-PERMISSION/groups/{group_id}/enterprise-projects](https://support.huaweicloud.com/api-iam/iam_02_0522.html) | iam:permissions:listEnterpriseProjectsForGroup | - | √ | | 查询用户直接关联的企业项目 | [GET /v3.0/OS-PERMISSION/users/{user_id}/enterprise-projects](https://support.huaweicloud.com/api-iam/iam_02_0523.html) | iam:permissions:listEnterpriseProjectsForUser | - | √ | | 查询企业项目直接关联用户 | [GET /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/users](https://support.huaweicloud.com/api-iam/ListUsersForEnterpriseProject.html) | iam:permissions:listUsersForEnterpriseProject | - | √ | | 查询企业项目直接关联用户的角色 | [GET /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/users/{user_id}/roles](https://support.huaweicloud.com/api-iam/ListRolesForUserOnEnterpriseProject.html) | iam:permissions:listRolesForUserOnEnterpriseProject | - | √ | | 基于用户为企业项目授权 | [PUT /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/users/{user_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/AssociateRoleToUserOnEnterpriseProject.html) | iam:permissions:grantRoleToUserOnEnterpriseProject | - | √ | | 删除企业项目直接关联用户的权限 | [DELETE /v3.0/OS-PERMISSION/enterprise-projects/{enterprise_project_id}/users/{user_id}/roles/{role_id}](https://support.huaweicloud.com/api-iam/RevokeRoleFromUserOnEnterpriseProject.html) | iam:permissions:revokeRoleFromUserOnEnterpriseProject | - | √ | #### 安全设置 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 修改账号操作保护策略 | [PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policy](https://support.huaweicloud.com/api-iam/iam_17_0001.html) | iam:securitypolicies:updateProtectPolicy | - | - | | 查询账号操作保护策略 | [GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policy](https://support.huaweicloud.com/api-iam/iam_17_0011.html) | iam:securitypolicies:getProtectPolicy | - | - | | 修改账号密码策略 | [PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policy](https://support.huaweicloud.com/api-iam/iam_17_0003.html) | iam:securitypolicies:updatePasswordPolicy | - | - | | 查询账号密码策略 | [GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policy](https://support.huaweicloud.com/api-iam/iam_17_0004.html) | iam:securitypolicies:getPasswordPolicy | - | - | | 修改账号登录策略 | [PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policy](https://support.huaweicloud.com/api-iam/iam_17_0005.html) | iam:securitypolicies:updateLoginPolicy | - | - | | 查询账号登录策略 | [GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policy](https://support.huaweicloud.com/api-iam/iam_17_0006.html) | iam:securitypolicies:getLoginPolicy | - | - | | 修改账号控制台访问策略 | [PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/console-acl-policy](https://support.huaweicloud.com/api-iam/iam_17_0007.html) | iam:securitypolicies:updateConsoleAclPolicy | - | - | | 查询账号控制台访问策略 | [GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/console-acl-policy](https://support.huaweicloud.com/api-iam/iam_17_0008.html) | iam:securitypolicies:getConsoleAclPolicy | - | - | | 修改账号接口访问策略 | [PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policy](https://support.huaweicloud.com/api-iam/iam_17_0009.html) | iam:securitypolicies:updateApiAclPolicy | - | - | | 查询账号接口访问策略 | [GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policy](https://support.huaweicloud.com/api-iam/iam_17_0010.html) | iam:securitypolicies:getApiAclPolicy | - | - | #### 联邦身份认证管理 | 权限 | 对应API接口 | 授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) | |:---|:---|:---|:---|:---| | 查询身份提供商列表 | [GET /v3/OS-FEDERATION/identity_providers](https://support.huaweicloud.com/api-iam/iam_13_0202.html) | iam:identityProviders:listIdentityProviders | - | - | | 查询身份提供商详情 | [GET /v3/OS-FEDERATION/identity_providers/{id}](https://support.huaweicloud.com/api-iam/iam_13_0203.html) | iam:identityProviders:getIdentityProvider | - | - | | 创建SAML身份提供商 | [PUT /v3/OS-FEDERATION/identity_providers/{id}](https://support.huaweicloud.com/api-iam/iam_13_0204.html) | iam:identityProviders:createIdentityProvider | - | - | | 修改SAML身份提供商配置 | [PATCH /v3/OS-FEDERATION/identity_providers/{id}](https://support.huaweicloud.com/api-iam/iam_13_0205.html) | iam:identityProviders:updateIdentityProvider | - | - | | 删除SAML身份提供商 | [DELETE /v3/OS-FEDERATION/identity_providers/{id}](https://support.huaweicloud.com/api-iam/iam_13_0206.html) | iam:identityProviders:deleteIdentityProvider | - | - | | 创建OIDC身份提供商 | [POST /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config](https://support.huaweicloud.com/api-iam/iam_13_0207.html) | iam:identityProviders:createOpenIDConnectConfig | - | - | | 修改OIDC身份提供商配置 | [PUT /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config](https://support.huaweicloud.com/api-iam/iam_13_0208.html) | iam:identityProviders:updateOpenIDConnectConfig | - | - | | 查询OIDC身份提供商 | [GET /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config](https://support.huaweicloud.com/api-iam/iam_13_0209.html) | iam:identityProviders:getOpenIDConnectConfig | - | - | | 查询映射列表 | [GET /v3/OS-FEDERATION/mappings](https://support.huaweicloud.com/api-iam/iam_13_0302.html) | iam:identityProviders:listMappings | - | - | | 查询映射详情 | [GET /v3/OS-FEDERATION/mappings/{id}](https://support.huaweicloud.com/api-iam/iam_13_0303.html) | iam:identityProviders:getMapping | - | - | | 注册映射 | [PUT /v3/OS-FEDERATION/mappings/{id}](https://support.huaweicloud.com/api-iam/iam_13_0304.html) | iam:identityProviders:createMapping | - | - | | 更新映射 | [PATCH /v3/OS-FEDERATION/mappings/{id}](https://support.huaweicloud.com/api-iam/iam_13_0305.html) | iam:identityProviders:updateMapping | - | - | | 删除映射 | [DELETE /v3/OS-FEDERATION/mappings/{id}](https://support.huaweicloud.com/api-iam/iam_13_0306.html) | iam:identityProviders:deleteMapping | - | - | | 查询协议列表 | [GET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols](https://support.huaweicloud.com/api-iam/iam_13_0402.html) | iam:identityProviders:listProtocols | - | - | | 查询协议详情 | [GET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}](https://support.huaweicloud.com/api-iam/iam_13_0403.html) | iam:identityProviders:getProtocol | - | - | | 注册协议 | [PUT /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}](https://support.huaweicloud.com/api-iam/iam_13_0404.html) | iam:identityProviders:createProtocol | - | - | | 更新协议 | [PATCH /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}](https://support.huaweicloud.com/api-iam/iam_13_0405.html) | iam:identityProviders:updateProtocol | - | - | | 删除协议 | [DELETE /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}](https://support.huaweicloud.com/api-iam/iam_13_0406.html) | iam:identityProviders:deleteProtocol | - | - | | 查询Metadata文件 | [GET /v3-ext/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/metadata](https://support.huaweicloud.com/api-iam/iam_13_0502.html) | iam:identityProviders:getIDPMetadata | - | - | | 导入Metadata文件 | [POST /v3-ext/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/metadata](https://support.huaweicloud.com/api-iam/iam_13_0504.html) | iam:identityProviders:createIDPMetadata | - | - |